Network Log Monitoring

The project was to find a way to manage logs that the computer creates for different events. The requirements for the project were that the log manager needed to be used in both Linux and Windows environments, alerted when the local admin logged into the server, and provide viewable log events when someone logged into the server remotely or locally.

The log managment tool that was used was Splunk. This is a free tool that can log up to 500mb of data per day. It stores the logs in one area which can then run searches, and view when the peak hours of data were occuring.  It also reports when abnormal amounts of logs are created, i.e. at 2:00 a.m. and you are having repeated log in attempts fail.

Student Team Members:  Nick Barnett, Samuel Jacobs